Emulation not working on TE 2000X

Libin_Thomas — Mon, 19 Jun 2017 10:23:08 GMT

Hi Folks,

we are facing issue on TE 2000x Device , the emulation is not happening please find below the debug logs and we installed the latest JHF 226

TED.ELG
{608B7BA6-62D2-3E49-811E-0F6596F800EA} VM 807: Terminating the VM due to increase number of VM errors (3)
[ 23840 4086475456][13 Jun 11:57:57] [TE_TRACE]: VM 807 KeyPoint: Terminating VM due to error: Failed to connect to SYMO client
[ 23840 4086475456][13 Jun 11:57:57] [TE (TD::Surprise)] te::Emulation::EmulatingVM::TerminateWithError: VM 807 (Creation In Process): Terminating VM due to error: Failed to connect to SYMO client

[ 23840 4086475456][13 Jun 11:57:57] [TE_TRACE (TD::Important)] te::Emulation::EmulationInvestigator::HandleInternalCommunicationError: VM 807 (5e5de275-a103-4f67-b55b-47532918fa59) : Internal Communication Error just happened: Failed to connect to SYMO client

[ 23840 4086475456][13 Jun 11:57:57] [TE_TRACE]: {608B7BA6-62D2-3E49-811E-0F6596F800EA} Run 1 for image: '3ff3ddae-e7fd-4969-818c-d5f1a2be336d' ended with verdict 'Error', reason: Internal virtual sandbox communication err

postfix error

Expert@DIS-BLUE-CPTE-01:0]# /opt/postfix/usr/sbin/postqueue -c /opt/postfix/et c/postfix/ -p

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 8: overriding earlie r entry: config_directory=/opt/postfix/etc/postfix/

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 27: overriding earli er entry: relay_domains=regexp:/opt/CPsuite-R77/fw1/conf/custom_relay_domains_re gex, /opt/CPsuite-R77/fw1/conf/custom_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 27: overriding earli er entry: relay_domains=regexp:/opt/CPsuite-R77/fw1/conf/custom_relay_domains_re gex, /opt/CPsuite-R77/fw1/conf/custom_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 27: overriding earli er entry: relay_domains=regexp:/opt/CPsuite-R77/fw1/conf/custom_relay_domains_re gex, /opt/CPsuite-R77/fw1/conf/custom_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 27: overriding earli er entry: relay_domains=regexp:/opt/CPsuite-R77/fw1/conf/custom_relay_domains_re gex, /opt/CPsuite-R77/fw1/conf/custom_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 27: overriding earli er entry: relay_domains=regexp:/opt/CPsuite-R77/fw1/conf/custom_relay_domains_re gex, /opt/CPsuite-R77/fw1/conf/custom_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 27: overriding earli er entry: relay_domains=regexp:/opt/CPsuite-R77/fw1/conf/custom_relay_domains_re gex, /opt/CPsuite-R77/fw1/conf/custom_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 27: overriding earli er entry: relay_domains=regexp:/opt/CPsuite-R77/fw1/conf/custom_relay_domains_re gex, /opt/CPsuite-R77/fw1/conf/custom_relay_domains

postqueue: warning: /opt/postfix/etc/postfix//main.cf, line 44: overriding earli er entry: relay_domains=regexp:/opt/postfix/etc/postfix/mta_relay_domains_regex, /opt/postfix/etc/postfix/mta_relay_domains

postqueue: fatal: malformed showq server response

let me know if any one have any thoughts or instruction to fix this issue

Re: Emulation not working on TE 2000X

Thomas_Werner — Mon, 19 Jun 2017 14:18:35 GMT

Hi Thomas,

do you see FW drops on traffic to a 169.254.x.x address range ?

Also what is the output of "tecli s d i" and "tecli a e v" ?

Regards Thomas

Re: Emulation not working on TE 2000X

Libin_Thomas — Tue, 11 Jul 2017 19:23:56 GMT

we followed this SK sk117634 and issue got resolved

Re: Emulation not working on TE 2000X

Thomas_Werner — Thu, 13 Jul 2017 08:29:01 GMT

Just a note:

The root cause might be this Security Gateway configured as MTA does not forward e-mails that contain attachments in TNEF format, or forwards them v…

So you also could a support to provide the fix for this issue.

Regards Thomas

Re: Emulation not working on TE 2000X

Libin_Thomas — Thu, 13 Jul 2017 08:50:30 GMT

MTA is configured on TE appliance , SMTP emulation is working fine . we are facing issue on HTTP emulation from firewall side the file is not sending to TE devices.

Just have query , which interface firewall will send the packet to TE . I have 2 interface in firewall which has reachability to TE so if user is trying to download a file from internal interface does it take the internal interface or the other one which is management subnet ,the sandblast object IP is from the management subnet .

Re: Emulation not working on TE 2000X

Thomas_Werner — Thu, 13 Jul 2017 08:57:20 GMT

Hi Thomas,

is this response related to the other thread with not working HTTP emulations ?

Because you posted it to the resolved local emulation problem ...

Regards Thomas

Re: Emulation not working on TE 2000X

Libin_Thomas — Thu, 13 Jul 2017 09:00:27 GMT

Hi Thomas ,

My mistake the previous message is related to http emulation

topic Re: Emulation not working on TE 2000X in Firewall and Security Management

Emulation not working on TE 2000X

Re: Emulation not working on TE 2000X

Re: Emulation not working on TE 2000X

Re: Emulation not working on TE 2000X

Re: Emulation not working on TE 2000X

Re: Emulation not working on TE 2000X

Re: Emulation not working on TE 2000X